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Abstract. In this paper we characterize (octal) bent generalized Boolean 
functions defined on Z2 with values in Zg. Moreover, we propose several 
constructions of such generalized bent functions for both n even and n 
odd. 
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1 Introduction 

Several generalizations of Boolean functions have been proposed in the recent 
years and the effect of the Walsh-Hadamard transform on them has been stud- 
ied [8112113) . The natural generalizations of bent functions in the Boolean case, 
namely generalized functions which have flat spectra with respect to the Walsh- 
Hadamard transform are of special interest. 

Let the set of integers, real numbers and complex numbers be denoted by Z, 
R and C, respectively. By Z,. we denote the ring of integers modulo r. A function 
from Z2 to Z2 is said to be a Boolean function on n variables and the set of all 
such functions is denoted by Bn ■ A function from Zj to Z, (g a positive integer) 
is said to be a generalized Boolean function on n variables . We denote the 
set of such functions by GB'^. We will consider these functions with an emphasis 
on q = 8. 

Any element x S Zj can be written as an 71-tuple (a;„, . . . , xi), where Xi € Z2 
for all z = 1, . . . , n. The addition over Z, K and C is denoted by '+'. The addition 
over Z2 for all n > 1, is denoted by ®. Addition modulo q is denoted by '+' 
and is understood from the context. If x = . . . ,xi) and y — (?/„, . . . ,yi) 
are two elements of Z2, we define the scalar (or inner) product, by x • y = 
XnVn © ■ ■ ■ © X2y2 ® xiUi- The cardinality of the set S is denoted by \S\. If 
z = a + bi € C, then \z\ = y/a^+lP denotes the absolute value of z, and 
z = a — hi denotes the complex conjugate of z, where = —1, and a, 6 G M. 
The conjugate of a bit h will also be denoted by h. 
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The (normalized) Walsh-Hadamard transform of / € Bn at any point u G Z2 
is defined by 

Wfiu) = 2~^ ^(-f)/W(-l)- 

A function / e where n is even, is a 6ent function if |W/(u)| = 1 for all 
u € Z2 . In case n is even a function / € i3„ is said to be a semibent function if 
and only if, |V^7(u)| e {0, V2} for all u e Z^. 
The sum 

xezj 

is the cross correlation of / and g at z. The autocorrelation of / G ;B„ at u G Z2 
is C/j(u) above, which we denote by C/(u). 

Let = e'^'^^/'^ be the g-primitive root of unity. The (generalized) Walsh- 
Hadamard transform of / G GB'}^ at any point u G Z2 is the complex valued 
function defined by 

H/(u) = 2-t E (^^''H-^r''- 

xezj 

A function / G is a generalized bent function (gbent, for short) if |?^y(u)| = 1 
for all u G Z^. 
The sum 

is the cross correlation of / and g at z. The autocorrelation of / G QB'^-^ at u G Zj 
is C/j(u) above, which we denote by C/(u). 

When 2'*"^ < g < 2'', given any / G QB'^ we associate a unique sequence of 
Boolean fimctions a-i <^ Bn (i = 0, 1, . . . , /i — 1) such that 

/(x) = ao(x) + 2ai(x) + • ■ ■ + 2''-ia,,_i(x), for all x G Z^. (1) 

2 Properties of Walsh-Hadamard transform on 
generalized Boolean functions 

We gather in the current section several properties of the Walsh-Hadamard 
transform and its generalized counterpart [6]. 

Theorem 1 We have: 

(i) Let f G Bn- Then, the inverse of the Walsh-Hadamard transform is 

(_l)/(y) = 2"t Wfiu){-iry. 
uezj 



{a) If f,g e Bn, then 

Cfju) = J2 l^/(x)P^,(x)(-l)"-. 
(Hi) Taking the particular case f = g we obtain 

(iv) A Boolean function f is bent if and only if Cf(u) = at all nonzero points 

u e z^. 

(v) For any f £ Bn, the Parseval's identity holds 

For more properties of these transforms and Boolean functions, the interested 
reader can consult |ll2l3j . 

The properties of the Walsh-Hadamard transform on generalized Boolean 
functions are similar to the Boolean function case. 

Theorem 2 We have: 

(i) Let f £ QBn- The inverse of the Walsh-Hadamard transform is given by 



Further, C/.g(u) = Cgj{u), for all u e , which implies thatCf{u) is always 
real. 

(") iff,gegBl, then 

Cfju) = h/(x)h;w(-i)"^ 

xGZJ 

(Hi) Taking the particular case f = g we obtain 

Cfiu) = J2 l^/(x)P(-l)-^ (2) 

(iv) If f (z GB^, then f is gbent if and only if 

c,(u)4r f;: (3) 

«/ u 7^ 0. 



(v) Moreover, the (generalized) Parseval's identity holds 

^ |^/(x)|'=2". (4) 
xezj 

3 The Walsh— Hadamard Transform on components 

Let ( = e^'^'/' be a primitive root of unity. Let / be written as /(x) = 
J2i=o ai(x)2*. For brevity, we use the notations Q := C^'. It is easy to see that, 
for s e Z2, we have 

and so, we have the identities Ci'^""^ = 5 (^j + A'-Q), where Ai = 1 + 
and 4 = 1- / = {0, 1, . . . , - 1} \ /. 

The Walsh Hadamard coefficients of / are 



X X 

=i:(-i)"-n(<^'T'"" 

X i=0 



i=0 

=2-'^$^(-i)"- Yi n Ci^i^^- 

X /c{o,...,/t-i}ie/je/ 

=2-''^(-i)- c^-^^'' n 

X ic{o,...,h-i} iei.jei 

X /C{0,... ,/»-!} JCI,KCI 

/C{0,...,/t-l} JCI,KGI X 

and so, we obtain the next result. 

Theorem 3 T/ie Walsh- Hadamard transform, of f : Z'^ ^ Zg, 2^'^ < q < 2^ , 
where /(x) = Y^Zq Cj(x)2% e B„ is given by 

/C{0,...,/i-l} JCI,KCI 

In the next section we will redo some of these calculations, for the particular 
case g = 8, which will allow us to completely describe the generalized bent 
Boolean functions in that case. 



4 A Characterization of Generalized Bent Functions in Zg 

In this section we extend the result of Sole and Tokareva [13] to generalized 
Boolean functions from into Zg. Let C = e^'^'^® = ^(l + i) be the S-primitive 
root of unity. Every function / : Zj — Zg can be written as 



where ai(x) are Boolean functions, and '+' is the addition modulo 8. We prove 
the next lemma, which gives the connection between Walsh-Hadamard trans- 
forms of / and it components as in 

Lemma 4 Let f e GB^ as in dH). Then, 

4-H/(u) = aoWaaCu) +aiWaoea2(u) +Q!2WaieQ2(u) +a3Waoeaiea2(u), 

where ao = 1 + (1 + V^)h ai = 1 + (1 - V^)i, a2 = I + \/2 - i, = 1 - ^2 - i. 
Proof. We compute 



/(x) =ao(x) +ai(x)2 + a2(x)22. 



(6) 



2"/2Hy(u) 



u-x 



xGZJ 





xGZJ 




xSZJ 



Use formula ([SJ with z 



I and z = in equation ([7]), and obtain 






xGZJ 




from which we derive our result. 



□ 



Corollary 5 With the notations of the previous lemma, we have 
4\/2|H/(u)|2 ^W^-X^ + 2XY+Y^-2WZ-Z^ + V2{W^+X^+Y^ + Z^), (8) 
where, we use for brevity, W := Wa^Cu), X := VKaoea2(u), Y := VKai©a2(u), 

Z ■— W^ao©ai ©02(11). 

Proof. By replacing a^, C by their complex representations, the corollary follows 
in a rather straightforward, albeit tedious manner. □ 

Theorem 6 Let f e GB^ as in Then: 

(i) If n is even, then f is generalized bent if and only if 02, ao ® 02, ai ® 02, ao © 
ai ©02 are all bent, and (*) H/ao©a2 (u)W^aiea2 (u) = W^aa (u)W^aoeoi©02 (u); 
for all US Z2 ; 

(ii) If n is odd, then f is generalized bent if and only if a2, ao © 02, Oi © a2, Oq © 
fli © a2 are semi-bent with their values satisfying (*). 

Proof. We use the W, X, Y, Z notations of Corollary[5] First, assume that 02, ao© 
a2, ai © a2, ao © ai © a2 are all bent (respectively, semi-bent). Then, replacing the 
corresponding values of the Walsh-Hadamard transforms in equation ([5]) (and 
using the imposed condition (*) on the Walsh-Hadamard coefficients) we obtain 

4V2\Hf{u)\^ =4^2, 

and so, |'H/(u)| = 1, that is, / is gbent. 

Conversely, we assume that / is gbent, and so, 

4^2 = - + 2XY + Y^ - 2WZ - Z^ + V2{W^ + X^ + Y^ + Z^), 

which prompts the system 

-X^ + 2XY + Y^ - 2WZ - Z^ = (9) 
+X^ + Y^ + Z^ = 4. (10) 

We are looking for solutions in 2^"/^ Z (a subset of Q, if n is even or Q, if n 
is odd). 

We look at equation (fTO)) . initially, and apply Jacobi's four squares theorem 
(see [7], for instance). 

Case (i). Let n = 2fc be even. Thus, W, X, Y, Z are all rational (certainly, not all 
0). Write W = 2-"/2l^', X = 2-'^/^X', Y = 2-"^^Y' , Z = 2-"/^^', and replace 
^ and pUj) by the system in integers 

_ _^ 2X'Y' + - 2W'Z' - Z'^ = (11) 
+ + = 22'=+2. (12) 

Now, by Jacobi's four-squares theorem, we know there are exactly 24 solutions 
of p2|l . which are all variations in ± sign and order of (±2*^, ±2*^, ±2^^, ±2'^) or 



(±2*^+^, 0, 0, 0). Further, it is straightforward to check that among these 24 so- 
lutions, only the eight tuples {X' , F', W\ Z') in the list below are also satisfying 
equation pT|) . 

^_2k^ _2'=, -2^ -2'=), (2^ 2^ -2^ -2*^), (-2^ -2^ 2^ 2*^), (-2^ 2^ -2^ 2'=), 
(-2*:^ _2'=, -2^ 2*^), (-2^ 2^ 2^ -2'^'), (2^ -2^ 2^ -2'=), (2^ 2^ 2^ 2'=). 

This implies that (X, F, VF, Z) e 2-"/2z4 are any of the following: 

(-1,-1, -1,-1), (1,1, -1,-1), (-1,-1, 1,1), (-1,1, -1,1), 
(1,-1, -1,1), (-1,1, 1,-1), (1,-1, 1,-1), (1,1, 1,1), 

and (i) is shown (one can check easily that these solutions also satisfy condi- 
tion (*)). 

Case (ii). Let n = 2/e + 1 be odd. Then, at least one of X, Y, W, Z is nonzero 
and belongs to %/2Q). As before, write W = 2-"/^W',X = 2~"/2^',r = 
2-n/2y/^2' = 2""/2^', and replace dH) and ([10]) by the system in integers 

_ j^a _^ 2X'Y' + - 2VK'Z' - Z'^ = (14) 
W^-f X'2-Fr'2 + Z'2 = 2-22'=+2, (15) 



and so, by Jacobi's four-squares theorem, equation (jlSp has exactly 24 solutions, 
which are all variations in ± sign and order of (±2''+^, ±2*^"'""'^, 0, 0). Further, 
it is straightforward to check that among these 24 solutions, the eight tuples 
{X' ,Y' ,W' , Z') in the list below are also satisfying equation (fM)) . 

(0, 2'=+!, 0, 2*^+1), (0, 2'=+\ 0, -2*^+1), (0, -2'^+\ 0, 2'^^+^), (0, -2'=+\ 0, -2''+^) 
(2'=+!, 0, 2'-^+!, 0), (2'=+!, 0, -2'=+!, 0, (-2'=+!, 0, 2^+\0), (-2''^+\ 0, -2'^+\ 0). 

Thus, the solutions {X,Y,W,Z) to ^ and dTO]) are 

(0, V2, 0, \/2), (0, \/2, 0, -\/2), (0, -\/2, 0, V2), (0, -\/2, 0, -V2), 
{V2, 0, \/2, 0), {V2, 0, -\/2, 0), (-\/2, 0, V2, 0), (-\/2, 0, -V2, 0), 
which also satisfy condition (*), and (ii) is shown. □ 

5 Constructions of generalized bent functions in Zg 

In this section we define several classes of generalized bent Boolean functions. 
Theorem 7 // / : Zl^^'^ ^ Zg (Vi even) is given by 

/(x, y, z) = 4c(x) + (4a(x) + 2c(x) + \)y + (46(x) + 2c(x) + \)z - 2yz, 
where a,b,c Cz Bn such that all a,b,c, a © c, & © c and a(S b are bent satisfying 
Wai^)Wb{^) + Wa(Bc{^)Wb(Sci^) = -2Wae(,(x) W^c(x)), for all X e (16) 
then f is gbent in QB^_^2- 



Proof. Wc compute the Walsh-Hadamard coefficients (using the fact that C = 
^(l + ^) and - 

(x,y,z)GZJ + ^ 

_ ^ (;^4c(x)^_-|^-ju-x 

xezj 

^(4a(x)+2c(x) + l)y+(4b(x)+2c(x) + l)z-2yz^_-|^^t>i/e«'z ^^j^ 



Applying equation (O with {z,s) — (i,c(x)), that is, 

' 2 + 2 

we obtain 

2H^(u,«,«;) = Wc{u) + ■ti)!^ (W^„ec(u) + Wa{u) + ?Waec(u) - iVK„(u)) 
Therefore, the real and the imaginary parts of cHf{\i, v, w) are 

{-lyWaivi) + (-l)-T^b(u) 



/to('H/(u, V, w)) 



V2 



V2 
and so, 

+ 2Wriyxf +2Wa®b{Vif) 
+ {-lY + '"{Wa{Vi)Wb{M) + W^aec(u)W6®c(u) + 2^^^ (u) W^^ei, (u) ) (1^) 
+ %/2 ((-l)''(W^a(u)We(u) + Wb{-a)Wa®b{vL)) 

+{-iy{Wb{n)Wc{vi) + W^4u)Wa®6(u))) 



Since a, 6,c, a ® c,b (B c,a ® b are all bent then |Wa(u)| — |Wf,(u)| = 
|W^,(u)| = \Waeb{u)\ = \Waeciu)\ = |M^,,ec(u)| = 1. Further, from the im- 
posed conditions on these functions' Walsh-Hadamard coefhcients, we see that 
Waiu)Wb{u) + Waec{u)WbM^) + 2Wciu)Wami^) = 0, and also Wa{u)W,iu) + 
Wbiu)Wamb{u) = 0, Wbiu)Wc{u)+Waiu)Waebiu) = (that is because if VKa(u) 
and Wb{u) have the same sign, then Wc{u),Wa(sb have opposite signs; further, 
Wa(u) and Wb{u) have opposite signs, then Wc{u),Wa(sb have the same sign). 
Using these equations, we get that A\'Hf{u,v,w)\'^ =4, and so, / is gbent. 

□ 



Remark 8 It is rather straightforward to see that condition (jl6l) has 16 solu- 
tions. More precisely, (Wo(x), M4(x), Waffic(x), PFbec W^ae^l^), W^c(x)) could be 
any of the following tuples: 



(-1,-1,-1,-1,-1,1); 

(-1,1,1,1,-1,1); 

(-1,1,-1,1,-1,-1); 

(-1,1,1,-1,1,-1); 

(1,-1,-1,1,-1,-1); 

(1,-1,1,-1,1,-1); 

(1,1,-1,-1,-1,1); 

(1,1,1,1,-1,1); 



(-1,-1,-1,-1,1,-1); 

(-1,-1,1,1,1,-1); 

(-1,1,-1,1,1,1); 

(-1,1,1,-1,1,1); 

(1,-1,-1,1,1,1); 

(1,-1,1,-1,1,1); 

(1,1,-1,-1,1,-1); 

(1,1,1,1,1,-1). 



Theorem 9 /// : Zj^^ — > Zs (n even) is given by 

/^(x, y, z) = 4c(x) + (4a(x) + l)y + (46(x) + l)z + 2eyz, 



(19) 



where e G {1, —1}, a,b,c G Bn such that all c, a(B c, b(Bc and a ® 6 ® c are bent, 
with 



Waec{u)Wbeciu) + eWc{u)Wa(sb(Sc{u) = 0, for all u G Z^, (20) 
then f is gbent in 013^^2- 

Proof. As in the proof of Theorem [71 we compute the Walsh-Hadamard coeffi- 
cients, obtaining 

2nf4u,v,w) = W^iu) + (-l)''CW^,ec(u) + {-irCWbM 

+ (-l)''®'"C'+'^W^a®6®c(u) 

= W,iu)-e{-ir®^Waebmcin) 

^ (-l)"W^affic(u) + i-irWb^cju) 

71 ' 



using the fact that — — e, for e e {1,-1}. Taking the square of the complex 

norm, we get 

4|H/, (U, V, W)\^ = Wa®c(u)2 + M^6®c(u)2 + W riv.f + W a^l^^rX^f 

+\/2 ((-l)'^(Ty,ec(u)W^c(u) + eM/6ec(u)W,ef,®c(u)) 
+(-l)'"(W^fc©c(u)W^e(u) + eW^aec(u)PFaebec(u))) 
= 4, 

because c, a ® c, 6 ® c and a ® 6 ® c are all bent, so their Walsh-Hadamard 
coefficients are 1 in absolute values, and equation (pHl) implies that the remaining 
coefficients are all (that can be seen by the following argument: if B,C,D £ 
{±1}, and AB + CD = 0, then by multiplying by BC, we get AC + BD = 0, 
and by multiplying by AC we get BC + AD — 0). 

Therefore, \'Hft{u,v,w)\'^ — 1, so f is gbent, and the theorem is proved. □ 

Remark 10 It is rather easy to see that equation (j20[) has 8 solutions (as ex- 
pected, since there are four degrees of freedom and one constraint). Moreover, 
one can give plenty of concrete examples of functions a, b, c satisfying the condi- 
tions of our theorem. For example, if e — —1, one could take in equation ()f 9|) . 
a bent Boolean c, and a — b such that c (B a is bent (for instance, if a — b 
are affine functions, that condition is immediate). Then, Wa0c(u)Wh0c(u) + 
eWc(u)Wa®6®c(u) = T^c®a(u)^ — Wc(u)^ = 0, and so, g as in our theorem is 
gbent. 

Theorem 11 Let f : 7,2^^ Zg (n is even) be given by 

/(x, y) = 4c(x) + (4a(x) + 4c(x) + 2e)y, (21) 

where e € {1, —1}. Then f is gbent in QB^^_^i if and only if a,c are bent in Bn- 
Moreover, if g is given by 

g(x, y) = 4c(x) + (4a(x) + 2c(x) + 2e)y, (22) 

where e € {1, — f }, a,c € Bn such that a,c, a ® c are all bent, then g is gbent in 
QB^j^i . Further, let h be given by 

/i(x,y) = 4c(x) + (4a(x) + 2e)2;, (23) 

where e S {1,-1}. Then h is gbent in QB^j^i if and only if c,a (B c are bent in 

Bn- 

Proof. We will show the first claim, since the proof of the remaining ones are ab- 
solutely similar. As in the proof of Theorem[71 the Walsh-Hadamard coefficients 
at an arbitrary input (u, v) are 

V2Hf{u,v) = We(u) + i^-iyWaiu) = W,{u) + e li^lf Wa{u) , 



and so, 

2\nf{u,v)\'' ^W,{nf + Wa{nf. 

If a,c are bent, then |Wc(u)| = |Wa(u)| = 1, and so \Hf{u,v)\ — 1, that is / 
is gbent. If / is gbent, then the equation Wc(u)^ + Wa(u)^ = 2 has as rational 
solutions only |iyc(u)| = |VFa(u)| = 1, and so, a, c are bent. □ 
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